Open Source Vulnerabilities
firefox, firefox, firefox, firefox, firefox
Mozilla developers reported memory safety bugs present in Firefox 76
firefox/ firefox/ firefox/ firefox/ firefox
Mozilla developers reported memory safety bugs present in Firefox 76
firefox, firefox, firefox, firefox, firefox
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL
firefox/ firefox/ firefox/ firefox/ firefox
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL
firefox, firefox, firefox, firefox, firefox
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar
firefox/ firefox/ firefox/ firefox/ firefox
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar
firefox, firefox, firefox, firefox, firefox
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen
firefox/ firefox/ firefox/ firefox/ firefox
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen
firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash
firefox/ firefox/ firefox/ firefox/ firefox/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr
Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash
firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash
firefox/ firefox/ firefox/ firefox/ firefox/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr
When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash
firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys
firefox/ firefox/ firefox/ firefox/ firefox/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr
NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys
firefox, firefox, firefox, firefox, firefox
Mozilla developers and community members reported memory safety bugs present in Firefox 77
firefox/ firefox/ firefox/ firefox/ firefox
Mozilla developers and community members reported memory safety bugs present in Firefox 77
firefox, firefox, firefox, firefox, firefox
Due to confusion processing a hyphen character in Date
firefox/ firefox/ firefox/ firefox/ firefox
Due to confusion processing a hyphen character in Date
firefox, firefox, firefox, firefox, firefox
When constructing a permission prompt for WebRTC, a URI was supplied from the content process
firefox/ firefox/ firefox/ firefox/ firefox
When constructing a permission prompt for WebRTC, a URI was supplied from the content process
firefox, firefox, firefox, firefox, firefox
When the Windows DLL "webauthn
firefox/ firefox/ firefox/ firefox/ firefox
When the Windows DLL "webauthn
firefox, firefox, firefox, firefox, firefox
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially expl...
firefox/ firefox/ firefox/ firefox/ firefox
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially expl...
firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator
firefox/ firefox/ firefox/ firefox/ firefox/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr
When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator
firefox, firefox, firefox, firefox, firefox
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow
firefox/ firefox/ firefox/ firefox/ firefox
During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow
firefox, firefox, firefox, firefox, firefox, firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash
firefox/ firefox/ firefox/ firefox/ firefox/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr/ firefox-esr
When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash
Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript
Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScript
gst-plugins-bad1.0, gst-plugins-base1.0
